Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a106f85-5ff6-3501-9c58-088c4aeba5a7.roa
File: 2a106f85-5ff6-3501-9c58-088c4aeba5a7.roa (raw, json)
Hash identifier: iRo2/kZFcOlsEGzlO5cqLhdqEWAclWn/HF5umcor9gg=
Subject key identifier: FF:63:D5:F8:3C:E0:37:29:D8:88:CF:C1:F3:DA:89:C7:14:01:D7:59
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485B6B044697F399EAF8C59400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a106f85-5ff6-3501-9c58-088c4aeba5a7.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.32.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:04:46:97:f3:99:ea:f8:c5:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=871847dc-019a-4114-8edb-c4a90d7b6b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:d2:29:35:ba:a8:87:a1:81:89:3b:9e:08:
26:8f:f3:8a:d0:d3:20:0f:a1:a1:88:ac:8c:e7:c8:
6a:0a:7b:1c:af:19:61:92:24:ab:f0:0b:ba:56:13:
06:be:6c:b7:b6:de:bc:ef:43:8f:8d:8d:37:2c:45:
44:60:ad:b6:84:5c:3b:f0:24:95:c1:c3:da:38:8e:
ed:2e:7f:d6:6e:ef:76:be:d8:e2:ef:18:28:cc:a4:
ea:3e:01:05:77:20:a6:4f:c4:8a:bf:5a:d0:28:70:
94:0d:68:a4:c0:3b:f8:cc:49:a4:f9:0a:e6:55:f8:
87:73:b4:f1:d1:5d:93:23:82:a1:3e:e9:ad:ff:00:
5e:f2:9c:ae:c0:72:b8:fc:93:5a:d0:8b:a0:96:1e:
fd:39:4b:40:4a:72:71:f1:fa:f8:1a:46:3b:34:e9:
e3:80:27:9b:6a:f5:e1:89:48:eb:0f:2b:66:87:99:
65:cc:85:f7:dc:7c:3d:d7:0a:1e:bf:6d:71:16:c3:
46:58:8f:e9:5c:36:f1:35:e1:8d:0e:df:3a:cd:ac:
fa:e3:4e:e1:5a:2b:a8:25:6b:21:a7:c0:74:2a:da:
c0:a5:47:4f:f4:b6:2f:98:38:a3:b5:b0:cf:19:a1:
8a:2d:c8:3a:c3:3a:d5:57:33:19:8f:f5:66:35:67:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:63:D5:F8:3C:E0:37:29:D8:88:CF:C1:F3:DA:89:C7:14:01:D7:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a106f85-5ff6-3501-9c58-088c4aeba5a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:ac:bf:b8:26:f5:58:e6:95:9a:c3:d8:b6:31:fa:22:50:d8:
51:39:51:b6:6f:f8:51:0d:7d:86:36:18:04:a5:32:02:6c:ed:
24:5a:d5:58:41:bf:cb:65:52:35:b5:03:e3:73:39:25:0c:22:
c7:34:da:68:71:e3:a6:77:71:66:f8:e4:4d:d3:3e:f4:19:3d:
61:7a:3b:ac:f0:a0:9c:dd:bc:c3:29:69:a7:3b:92:db:72:46:
30:6b:b5:a8:92:33:16:f8:24:f4:b5:1e:2d:56:8d:f8:c3:3c:
ba:03:88:cb:9f:08:45:ab:f3:03:f3:09:b0:4a:8c:bd:b9:89:
a5:c4:80:c4:0b:a4:c7:b3:01:48:57:51:b8:9c:9f:fa:a7:3c:
3b:77:55:ac:bd:73:ba:6c:48:e2:25:42:85:5a:d9:69:0c:86:
05:c9:8c:3e:a2:32:51:1d:f8:e4:84:b4:9b:cb:45:18:d2:f6:
c0:e6:b5:39:7b:a8:61:fc:d8:dd:18:db:82:41:cc:0b:dd:1f:
4e:b6:62:06:10:d4:a3:fb:51:1e:65:25:3f:08:3b:db:a0:a7:
05:82:f1:9a:d5:8e:e8:3e:ec:80:cc:25:86:87:3e:9c:fc:5a:
24:eb:29:48:97:2d:4f:0e:11:2f:c8:18:5b:45:6d:5d:7d:fc:
89:ee:6b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:48:06 2025 by rpki-client